I have a little ZyXEL VMG1312 router which is simply configured with VDSL WAN and an internet network / wifi which has all been working perfectly.
I want to allow remote RDP access to a computer (192.168.1.10) on the internal network so setup a port forwarding rule for port 3389 and remote access was enabled.
I then realised that this was open to anybody, so have spent the 3 last hours attempting to apply IP restriction to the NAT rule, with zero success!
I have tried every combination under Access Control i can think of to restrict access to port 3389, even an any-any drop rule on the WAN-LAN direction for port 3389, with no luck - you can still access RDP from any IP.
Does anybody have any experience of configuring an ACL restriction to NAT rules on this router as it seems they do not apply at all? It doesn't seem to confirm to the same rules as every firewall/router i've ever used before!